Profile picture
, 9 tweets, 7 min read
My Authors
Read all threads
Stoked to share these free resources to expand your #infosec and technical skill set.

Each is a career path in its own right, the rabbit hole goes down as far as you follow.

Check these out and make 2020 count! 🎊

#30DaysOfThreads #BlackTechTwitter
#latinxintech
Begin your road into #pentesting with this staple book and free VM to practice hacking into 💻

Metasploit The Penetration Testers Guide : archive.org/details/Metasp… via @internetarchive

offensive-security.com/metasploit-unl…
A requirement for all in #dfir is being able to read and understand network traffic. It’s how our systems communicate!

Practical packet analysis: using Wireshark to solve real-world network problems : Sanders, Chris

archive.org/details/Practi…
Learn to write #exploit and countermeasures code from this amazing book 📚

#Hacking: The Art Of Exploitation
by Jon Erickson : archive.org/details/hackin… via @internetarchive
Web apps are used by billions of people daily. Learn how to attack web apps with this amazing resource!

The Web Application Hackers Handbook; Dafydd Stuttard, Marcus Pinto : archive.org/details/TheWeb… via @internetarchive

#100DaysOfCode #DEVcommunity #webdeveloper
A MUST for any serious technologist! For many the commmand line interface is the only interface. You will encounter it the rest of your careee, learn it now!

The #Linux Command Line: A Complete Introduction : William E. Shotts : archive.org/details/2016Th… via @internetarchive
A good defense starts with an understanding of the offense. Learn to dissect and understand the attacks and techniques of attacker software!

Practical #Malware Analysis : archive.org/details/Practi… via @internetarchive
I hope this list gets you interested in something new and you can begin that journey.

Not sure what’s the next step you should be taking? Ask! If I don’t know I’ll tag in a friend who does! 🥳

Your friend,
Public Universal Hacker
@threadreaderapp unroll !
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Public Universal Hacker

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#infosec #30DaysOfThreads #BlackTechTwitter #latinxintech #pentesting #dfir #exploit #Hacking #100DaysOfCode #DEVcommunity #webdeveloper #Linux #Malware

More from @0XBANANA see all

Profile picture
Public Universal Hacker
@0XBANANA
#OSINT Technique - Google Dorking

Google has a lot of power built into it’s search bar. It’s one of many tools used by #infosec to perform Open Source INTelligence research. Here are some dorks to find items of interest, edit and try them out! 🔎

#30DaysOfThreads
Searching a specific site and its subdomains 🏪

You don’t have to search the entire internet, you can focus a search to a specific site and its subdomains.

site: twitter.com 0xBanana
site: cnn.com juggling
Searching for a specific filetype 🧬

There are so many file types out there, using the filetype operator we can focus on types of interest.

Want to find: Videos? Documents? Zips? Try it out!

filetype: pdf
filetype: pptx

All formats 👇🏽
en.wikipedia.org/wiki/List_of_f…
Read 7 tweets
Profile picture
Public Universal Hacker
@0XBANANA
The Cyber Attack Lifecycle describes the actions taken by an attacker from initial identification and recon to mission complete. This helps us understand and combat bad actors, ransomware, and others.

Let’s break down the steps ! 🧵

#30DaysOfThreads #infosec #security #tech 1/9
Initial Reconnaissance 🔎 - 2/9

Intruder selects target, researches it, and attempts to identify vulnerabilities in the target network. Some things attackers use and look for:

Whois
Target IP Ranges
Web Properties, Domains & Subdomains
Open Cloud Buckets
Google dorking
Initial Compromise 📬 - 3/9

Attacker compromises a vulnerable host. This may be a DMZ host or something in a higher security group via email phish. This is the first step into a network and why security people always say:

Don't click email links!
Don't open email attachments!
Read 10 tweets
Profile picture
🍌👻🎃👻🎃👻🎃👻
@0XBANANA
Ever felt completely immersed and “in the zone” when coding or working on something?

Psychologists call this a “flow state” you are living in the moment, utterly absorbed in the present activity. Time seems to fall away.

Let’s talk about it!
1/n
In positive psychology, a flow state, is the mental state of operation in which a person performing an activity is fully immersed in a feeling of energized focus, full involvement, and enjoyment in the process of the activity.

2/n
The benefits of a flow state

1️⃣ Improved performance in a wide variety of areas including teaching, learning, athletics, and artistic creativity.
2️⃣ Accelerate learning and skill development.
3️⃣ Increased enjoyment of task.
4️⃣ Ultimate eustress experience
Read 6 tweets

Related threads

Profile picture
InfoSecSherpa
@InfoSecSherpa
Anybody mind if I do a little #InfoSec related story time thread, about helping newcomers?
2/x I had a loooong chat over dinner with a woman taking the #SEC301 Introduction to Cyber Security Training Course here at the #SANSCDI. First, I give her a lot of credit for diving into such a massive class and at a large summit, no less.
3/x This isn't going to be especially profound or anything. Just a story about throwing the rope over the wall, or sending the elevator down, or whichever analogy you'd like to use for helping to onboard newbies to #InfoSec.
Read 12 tweets
Profile picture
Teeth Sweat
@dabnisbrickey_
I know we poke fun at Spirit Halloween stores – but it’s a genius concept. I went on a rabbit hole and opened my 3rd eye. Wild shit ... check it out.
SPIRIT HALLOWEEN INVENTED THE POP-UP SHOP!

For real.
Spirit Halloween is owned by Spencer’s Gifts. They purchased the brand when it was just 63 stores. It’s now ballooned to more than 1300 locations.
Read 10 tweets
Profile picture
Christopher Ingraham
@_cingraham
CAT DRAMA: This orange moron, one of our three cats, has been missing for 36 hours. Wife put out a missing kitty alert on Facebook (1/n)
People were, apparently, talking about the Ingrahams’ missing cat at one of the local bars today
One of the bar regulars, an octogenarian named Larry, overhears the conversation. “Huh,” he says, “I got woken up at 3 AM by some wild animal knocking shit over in my house.”
Read 26 tweets
Profile picture
Mingyu Zheng
@zmingyu
Earlier this year I transitioned from product into security. This is my #infosec story.

It all started about two years ago with the WannaCry incident (en.m.wikipedia.org/wiki/WannaCry_…). Some rando had stopped malware from spreading by buying up a domain name, and this legit blew my mind.
I thought you had to have serious 1337 chops to stop worldwide cyberattacks?? Apparently I’ve had it in me all this time?

Well that 'rando' happened to be on Twitter, and not only did he possess actual 1337 chops, but a wicked sense of humour to boot.
I’m talking about the fabulous @MalwareTechBlog of course. Shortly after that I found @malwareunicorn, who is living proof that 1337 chops and fashion can go hand in hand (come to think of it, why the heck not). Then @SwiftOnSecurity, and down the security rabbit hole I went...
Read 11 tweets
Profile picture
Jason Wright
@jasonawright7
1. The sleeping giant is slowly awakening to the corruption that is enslaving us all.

Once this giant has fully awoken we shall be unstoppable.

Public awakening is their greatest fear.

#QAnon @POTUS @realDonaldTrump
2. It’s essential that #WeThePeople understand how #Corruption in the pharmaceutical industry has a stronghold on people.

#QAnon @POTUS @realDonaldTrump
3. This long & detailed thread will shine light on corruption in the vaccine and cancer industry.

These are complicated & touchy parts of the #DeepState rabbithole for obvious reasons but facing the #Truth is very important.

The truth shall set everyone #free.

#QAnon @POTUS
Read 109 tweets

Trending hashtags

#BigPharma #infosec #OrguIsland #physician #EpsteinScandal #vaccination #explore #Montreal #Process #MKULTRA #DeepState #doctor #VictoriasSecret #Panic #biology #2ndfamily #badmanagement #obstacles #DCINPANIC #careeradvice #OriginStory #OhioState #EpsteinBlackBook #EpsteinIsAChildRapist #VoiceIWS
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!